Cloud Security Posture Management Specialist

About the Role:

• This position will oversee the Cloud Security Posture Management (CSPM) function, ensuring stability and viability of cloud security platforms and initiatives. The successful candidate will be responsible for managing a team to administer, configure, and optimize the CSPM platform to continuously monitor cloud security posture.
• Act as primary contact for cloud platform-related issues, effectively integrating cloud security strategy using the CSPM platform. Build and support data integration pipelines from the CSPM Platform to downstream systems such as Brinqa, Splunk, etc.
• Assist in Asset Inventory efforts related to Cloud Inventory discovery/attribution and enrich Cloud Resource meta-data. Ensure data quality and integrity of the CSPM platform and enrich data to manage security posture KPIs, reports, and dashboards to enable accurate and timely reporting of security findings, threat detection, insights for the organization.
• Collaborate with Vulnerability Management Center of Excellence by providing subject matter expertise on CSPM findings, data analysis, training, documentation to help remediate vulnerabilities on the cloud platforms (AWS, Azure, and GCP). Lead engineering efforts related to the CSPM platform to support custom and out-of-the-box APIs and ensure security controls are managed through automated CI/CD pipeline.
• Suggest, improve, and implement processes to enhance the platform and find opportunities for integration with other security platforms and systems. Effectively communicate and collaborate with cross-functional organizations to present cloud security risk based on CSPM findings and help drive reducing the risk for the organization.
• Support Audit/Compliance/Regulatory work for Cloud Platforms working closely with GRC. Provide incident management support and manage on-call rotation.

Program/Project Management:

• Lead and manage cross-functional projects from initiation to completion, ensuring alignment with overall organizational goals. Collaborate with PMO to create and maintain detailed project plans, timelines, and milestones.
• Work with stakeholders to define project scope, deliverables, and expectations, ensuring alignment with business objectives. Monitor and report on project progress, addressing any obstacles or delays, and escalating issues as needed.
• Coordinate with various teams to ensure resources are allocated efficiently and deadlines are met. Ability to build a framework and drive development through dynamic business intelligence tools and dashboards for use in ongoing business planning and goal measurement through KPIs.

People Management:

• Lead, motivate, and support a team of professionals, ensuring alignment with organizational goals and fostering a high-performing, collaborative work environment. Conduct regular one-on-ones, performance reviews, and provide constructive feedback to help team members achieve their full potential.
• Identify training needs and provide guidance to help team members enhance their skills, grow professionally, and reach their career goals. Actively contribute to talent recruitment and onboarding, ensuring that new hires are integrated effectively into the team and have the tools they need to succeed.
• Address interpersonal conflicts and help resolve team challenges by fostering open communication and a supportive environment. Promote a positive team culture, ensuring that team members feel valued, motivated, and engaged in their work.

Qualifications & Experiences:

• Bachelor's degree in computer science, Information Security, or a related field.
• 7 or more years of experience with 3 or more years of management experience working as a Technical Lead or Technical Manager in Cloud Security.
• In-depth knowledge of cloud computing platforms such as AWS, GCP, and Azure.
• Security certification like CISSP/CISM/CompTIA+, etc., and/or CSP (AWS, GCP, Azure) is preferred.
• Hybrid work environment. Must be based in the office, minimum three days/week.
• Prior experience in people management is a plus. Strong understanding of industry security standard frameworks like NIST (RMF/CSF), MITRE, etc.
• Demonstrated experience working with any of the CSPM Platforms like Wiz, Divvy Cloud, Prisma Cloud, Orca, etc. (Wiz is preferred).
• Strong knowledge of work productivity tools like Office 365, Atlassian, etc. is required.
• Must possess excellent communication, presentation, and collaboration skills.

About You:

• You are excited to work in an international, fast-paced, multi-faceted media company.
• You are comfortable ensuring timely escalation, responsiveness, and follow-through to meet deadlines.
• You are knowledgeable of, and understand, the risk-based business impact approach to cybersecurity.
• You are actively questioning and influencing actions needed to attain goals and targets.
• You are comfortable driving initiatives forward without having direct control of staff.

Guiding Principles:

We operate with the following guiding principles: www.wbd.com/guiding-principles/